Vault

Problem: managing passwords

PaaS

Self hosting

Clear text in repo

Ansible Vault

Solution: Vault

What is Vault?

• Server for secrets
• Has API for updating/fetching
• Has ACL engine
• Has different storage mechanism
• Has few quirks ;)

Alternatives

• Amazon KMS
• Keywhiz